{"id":11832,"date":"2018-04-02T19:38:04","date_gmt":"2018-04-03T00:38:04","guid":{"rendered":"http:\/\/sites.law.duq.edu\/juris\/?p=11832"},"modified":"2018-04-02T19:47:08","modified_gmt":"2018-04-03T00:47:08","slug":"beyond-farmville-facebook-harvests-more-than-digital-crops","status":"publish","type":"post","link":"https:\/\/sites.law.duq.edu\/juris\/2018\/04\/02\/beyond-farmville-facebook-harvests-more-than-digital-crops\/","title":{"rendered":"Beyond FarmVille: Facebook Harvests More Than Digital Crops"},"content":{"rendered":"
\"\"
Photo Credit: Pixabay<\/figcaption><\/figure>\n

By Samantha Cook, Staff Writer<\/strong><\/p>\n

\u201cIf something is free, you\u2019re not the customer \u2013 you\u2019re the product.\u201d<\/em><\/p>\n

 <\/p>\n

While free for users, Facebook turns its consumer data into a huge profit. Christopher Wylie, a whistleblower from the U.K. consulting firm Cambridge Analytica came forward recently about what he considered to be unethical use of consumer data in the 2016 presidential election. This internal source, a co-founder of Cambridge Analytica, alleges that the consulting firm analyzed data taken from around 50 million Facebook users to profile voters, and sold its research to the Trump campaign for $5 million.[1]<\/sup><\/a> The firm has data of about 230 million American adults, and has an average of 400 data points about each of them.[2]<\/sup><\/a><\/p>\n

Users\u2019 data were collected through a survey app on Facebook that adjusted their privacy settings to allow the app to collect more than just the survey results. It gave the app permission to collect other data through the site, including data about users\u2019 friends. Almost all users were unaware of the app\u2019s privacy settings.[3]<\/sup><\/a><\/p>\n

Facebook responded with boilerplate apologies and assurances of investigation. The social media giant, however, may be facing some legal backlash for its lax data protection policies. Wylie questioned why Facebook didn\u2019t investigate when it started seeing that tens of millions of records were being pulled by third parties, and went so far as to charge Facebook with facilitating the project by allowing apps to have these invasive permissions at all. [4]<\/sup><\/a><\/p>\n

Despite the U.S.\u2019s general lack of data privacy laws, Facebook\u2019s legal department is humming with inquiries. In 2011, Facebook signed a consent decree with the Federal Trade Commission,[5]<\/sup><\/a> which has historically been the primary consumer privacy watchdog in the U.S. The agreement was the result of an FTC complaint against Facebook alleging that the company violated its own privacy policies by sharing users\u2019 information with third parties without the users\u2019 consent.[6]<\/sup><\/a> Other claims against Facebook include that it was misleading in its policies regarding retention of data after an account is deleted, that it failed to update users about changes in privacy settings, and that it did not adhere, as it had certified, to the U.S.- E.U. Safe Harbor Framework.[7]<\/sup><\/a><\/p>\n

To settle with the FTC, Facebook agreed not to misrepresent its privacy and security policies to users.[8]<\/sup><\/a> Prior to sharing nonpublic user information with any third party, Facebook is required to \u201cclearly and prominently\u201d disclose to the user the categories of data that will be disclosed, the identity or type of third party receiving the information, and that such sharing exceeds the previously agreed-to privacy settings.[9]<\/sup><\/a><\/p>\n

The FTC is currently investigating the Cambridge Analytica case to determine if Facebook truly violated the 2011 decree. Some say that it isn\u2019t clear if the company violated the decree because it was at liberty to share data when a user consented to sharing information about their \u201cfriends.\u201d[10]<\/sup><\/a> Regardless of the details of the decree, however, Facebook has more to worry about than just the FTC.<\/p>\n

Thirty-seven state attorneys general sent a letter to Facebook expressing concern with its privacy practices. The letter contained a list of questions for the company, like whether the terms of service were clear and understandable, whether Facebook had controls over the types of data given to developers, how many users were impacted, and when Facebook learned about the privacy breach.[11]<\/sup><\/a> Illinois has already sued Facebook for fraud, referring to the company as \u201ca data aggregation machine disguised as a social network.\u201d[12]<\/sup><\/a> The suit hinted at Cambridge Analytica\u2019s electioneering as well and Facebook\u2019s \u201crich history of experimenting on its users.\u201d [13]<\/sup><\/a><\/p>\n

The states\u2019 privacy and fraud laws vary, but it is clear that Facebook\u2019s practices are raising eyebrows across the country and potentially stirring lawmakers to prioritize personal data protection over protections for big data firms. The Open Rights Group, a digital rights protection campaign, commented that, \u201cAmerican privacy law is completely broken,\u201d citing to the common sentiment that social media users do not feel as though they have a grasp on their own data.[14]<\/sup><\/a><\/p>\n

While FTC regulations and state fraud laws may suffice to keep Facebook\u2019s rampant policy violations in check, there is limited substantive law in the U.S. protecting consumer data. Though there are explicit regulations against disclosing health information or children\u2019s personal information (e.g. HIPAA and COPPA), the law is less robust on social media protections in the U.S. than in its European counterparts.<\/p>\n

Effective May 25, 2018, the European Union will enforce the General Data Protection Regulation, a new set of laws targeted at (predominantly American) tech companies. One new rule in this legislation is that user consent forms must be written in plain language, not incorporated into pages-long terms and conditions that users do not read.[15]<\/sup><\/a> Had Facebook\u2019s privacy violation occurred after these rules became effective, it would have resulted in a roughly $1.6 billion fine.[16]<\/sup><\/a><\/p>\n

Companies around the world are realizing the value of big data. Tiny bits of information about individuals, meaningless on their own, can make a huge impact when aggregated. Whether it be to target make-up advertisements or to sway an entire electorate, Facebook has created a secondary business of selling consumer data. The value of such data has thus far outweighed the privacy concerns, and as such Congress has not yet taken action to legislate for social media users\u2019 rights, despite the FTC\u2019s recommendations.[17]<\/sup><\/a><\/p>\n

Facebook CEO Mark Zuckerberg will testify before Congress about this issue. Google and Twitter have also been called to speak about their data privacy practices.[18]<\/sup><\/a> Given the backlash from Facebook\u2019s latest scandal, perhaps the federal government will be more willing to create bright-line policies regarding data generated from social media and to keep the sites free, without making the users the products.<\/p>\n

 <\/p>\n

 <\/p>\n

Sources<\/strong><\/p>\n

\n

[1]<\/a> https:\/\/www.nbcnews.com\/news\/us-news\/cambridge-analytica-harvested-data-millions-unsuspecting-facebook-users-n857591<\/p>\n

[2]<\/a> https:\/\/www.nbcnews.com\/storyline\/2016-election-day\/trump-campaign-pays-millions-overseas-big-data-firm-n677321<\/p>\n

[3]<\/a> Id.<\/em><\/p>\n

[4]<\/a> Id.<\/em><\/p>\n

[5]<\/a> https:\/\/www.ftc.gov\/sites\/default\/files\/documents\/cases\/2011\/11\/111129facebookagree.pdf<\/p>\n

[6]<\/a> https:\/\/www.ftc.gov\/sites\/default\/files\/documents\/cases\/2011\/11\/111129facebookcmpt.pdf<\/p>\n

[7]<\/a> Id.<\/em><\/p>\n

[8]<\/a> https:\/\/www.ftc.gov\/sites\/default\/files\/documents\/cases\/2011\/11\/111129facebookagree.pdf<\/p>\n

[9]<\/a> Id.<\/em><\/p>\n

[10]<\/a> https:\/\/www.npr.org\/sections\/thetwo-way\/2018\/03\/26\/597135373\/ftc-confirms-its-investigating-facebook-for-possible-privacy-violations<\/p>\n

[11]<\/a> http:\/\/paofficeofattorneygeneral.pr-optout.com\/Tracking.aspx?Data=HHL%3d82%3b4%3a%26JDG%3c%3a7%403869%26SDG%3c90%3a.&RE=IN&RI=711446&Preview=False&DistributionActionID=3363&Action=Follow+Link<\/p>\n

[12]<\/a> https:\/\/www.cookcountystatesattorney.org\/sites\/default\/files\/files\/documents\/cook_county_sao-facebook_cambridge_analytica_complaint.pdf<\/p>\n

[13]<\/a> Id.<\/em><\/p>\n

[14]<\/a> https:\/\/www.nbcnews.com\/storyline\/2016-election-day\/trump-campaign-pays-millions-overseas-big-data-firm-n677321<\/p>\n

[15]<\/a> https:\/\/www.eugdpr.org\/key-changes.html<\/p>\n

[16]<\/a> https:\/\/www.nytimes.com\/aponline\/2018\/03\/26\/world\/europe\/ap-eu-europe-data-crackdown.html<\/p>\n

[17]<\/a> Adame, Vivian. COMMENT: Consumers’ Obsession Becoming Retailers’ Possession: The Way That Retailers Are Benefiting from Consumers’ Presence on Social Media<\/em>, 53 San Diego L. Rev. 653 (2016).<\/p>\n

[18]<\/a> https:\/\/www.nytimes.com\/2018\/03\/27\/technology\/facebooks-zuckerberg-said-to-agree-to-testify-before-congress-over-data-privacy.html<\/p>\n","protected":false},"excerpt":{"rendered":"

By Samantha Cook, Staff Writer \u201cIf something is free, you\u2019re not the customer \u2013 you\u2019re the product.\u201d   While free for users, Facebook turns its consumer data into a huge profit. Christopher Wylie, a whistleblower from the U.K. consulting firm Cambridge Analytica came forward recently about what he considered to [\u2026] <\/p>\n

<\/div>\n

Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,4],"tags":[2251,2252,2257,56,84,83,2256,1083,1949,2254,2255,2253],"class_list":["post-11832","post","type-post","status-publish","format-standard","hentry","category-juris-blog","category-posts","tag-cambridge-analytica","tag-data-privacy","tag-european-union","tag-facebook","tag-federal-trade-commission","tag-ftc","tag-general-data-protection-regulation","tag-mark-zuckerberg","tag-samantha-cook","tag-sharing-user-information","tag-the-open-rights-group","tag-user-consent"],"_links":{"self":[{"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/posts\/11832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/comments?post=11832"}],"version-history":[{"count":2,"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/posts\/11832\/revisions"}],"predecessor-version":[{"id":11839,"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/posts\/11832\/revisions\/11839"}],"wp:attachment":[{"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/media?parent=11832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/categories?post=11832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.law.duq.edu\/juris\/wp-json\/wp\/v2\/tags?post=11832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}